$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json) Hash identifier: NjPDO+avrHubVzvaErj517r62b/Ysz+mp54oPTtz21w= Subject key identifier: FC:4A:8A:CB:6D:78:BE:ED:21:F0:38:8A:43:38:68:43:74:C5:B6:F2 Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft Manifest number: 0BF6 Signing time: Fri 22 Nov 2024 18:20:55 +0000 Manifest this update: Fri 22 Nov 2024 18:20:54 +0000 Manifest next update: Fri 29 Nov 2024 18:20:54 +0000 Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: T9XJcBiC50w+1bOXI4nPpDqaEGrz9MnKrl5b/9w1/WQ=) 2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: ZJYTa6/4Mo2ZhGCzzSDSUlHgf//iLKJXvM086ZIoSG4=) 3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: y1Ah/sCRnzTCZTtDJj4VAK1Ak4axz54qZlJpOkCDzUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Validity Not Before: Nov 22 18:20:54 2024 GMT Not After : Nov 29 18:20:54 2024 GMT Subject: CN=6740cb87-82de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:11:88:7a:5b:10:ae:96:18:40:61:a0:53: 4c:56:7e:ca:d5:4b:1f:bb:ba:38:a6:8c:44:80:df: 7a:54:3d:ac:e8:fc:8e:1f:72:86:19:62:cc:90:50: 6a:51:92:2c:ae:ad:1a:27:d6:ba:d4:18:3e:2c:c4: 63:2a:bd:34:1c:81:ed:76:72:9c:e5:ae:cd:95:c9: 9f:fc:05:51:a9:0b:df:c4:26:3c:0b:47:a4:8d:7d: 90:5e:30:b1:76:d5:18:c8:bf:a8:b8:25:2d:21:6d: 6c:66:5c:4d:4d:8a:1b:a4:11:f3:5a:87:82:5c:66: 1c:9e:f6:20:de:53:40:ad:e2:ad:de:22:06:39:df: 44:09:78:42:2c:3e:bc:d5:15:c1:45:ca:0e:4f:e6: 06:c9:63:6f:e2:e9:56:71:a2:e7:0a:4f:2e:7f:f6: 97:2e:dc:1d:26:7d:a1:98:61:d3:88:ed:37:30:b7: 5b:cb:31:82:fd:22:56:b5:32:74:9c:c1:fe:ac:2d: 62:10:48:32:7d:0c:09:ee:3c:11:37:96:bc:5a:e3: db:8c:90:e8:d2:3c:76:c6:98:89:fd:2b:e6:d1:27: 53:ed:64:4c:3d:a2:9d:83:aa:f5:8f:67:03:15:33: 95:24:13:0d:54:8d:81:8d:3b:82:90:cb:cf:dc:e6: 6f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4A:8A:CB:6D:78:BE:ED:21:F0:38:8A:43:38:68:43:74:C5:B6:F2 X509v3 Authority Key Identifier: keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ed:bd:dc:6c:83:83:4e:57:50:73:d6:fd:bd:32:9a:28:5b: ce:10:20:1d:2d:17:8f:a8:3a:24:2d:23:f3:3b:84:98:62:fb: 6d:22:99:2c:a3:b7:f8:64:87:8f:b0:4e:00:a4:3d:c6:0e:99: 71:fd:fc:fd:41:4e:65:00:b0:fe:d8:4f:a2:49:ca:bb:d5:a0: 93:b7:59:ee:3b:13:84:fb:9c:77:2f:bd:2d:20:1f:0c:f0:64: 2a:ba:13:87:95:45:54:e5:df:6d:31:a1:89:0b:26:fb:c1:a2: 6b:6e:b5:93:fa:2d:c3:41:5d:d8:6a:32:31:40:11:2e:35:47: 5b:72:2f:b3:f0:52:ce:37:c2:f2:f1:50:bc:aa:e2:14:c0:66: 74:9b:71:eb:bc:60:17:9b:5a:1f:21:e7:da:0b:ea:f5:27:bd: 2a:83:e4:c5:5a:ac:a4:53:c0:ac:3b:ec:67:08:ed:d7:78:cb: 70:0e:2e:c7:9f:65:c5:05:6d:93:0c:a5:c1:0b:53:05:a3:be: 73:d7:0d:6e:49:9d:79:84:95:69:1e:89:dc:29:21:09:98:2b: 2b:eb:f9:33:2a:53:c5:14:34:d0:b1:2d:99:ac:a9:f9:53:ab: 78:0f:08:42:e9:e8:28:d2:a6:3c:6a:8c:b4:b6:f9:85:16:9e: 3e:28:c2:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwMjMxMTAvBgNVBAUTKDY3MjdCOEY0MzNFRjJGRTA4MDg0MkM2RUU4QTZDQzNE QzI0NDYyNkYwHhcNMjQxMTIyMTgyMDU0WhcNMjQxMTI5MTgyMDU0WjAYMRYwFAYD VQQDEw02NzQwY2I4Ny04MmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8gRiHpbEK6WGEBhoFNMVn7K1Usfu7o4poxEgN96VD2s6PyOH3KGGWLMkFBq UZIsrq0aJ9a61Bg+LMRjKr00HIHtdnKc5a7Nlcmf/AVRqQvfxCY8C0ekjX2QXjCx dtUYyL+ouCUtIW1sZlxNTYobpBHzWoeCXGYcnvYg3lNAreKt3iIGOd9ECXhCLD68 1RXBRcoOT+YGyWNv4ulWcaLnCk8uf/aXLtwdJn2hmGHTiO03MLdbyzGC/SJWtTJ0 nMH+rC1iEEgyfQwJ7jwRN5a8WuPbjJDo0jx2xpiJ/Svm0SdT7WRMPaKdg6r1j2cD FTOVJBMNVI2BjTuCkMvP3OZviQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxKistt eL7tIfA4ikM4aEN0xbbyMB8GA1UdIwQYMBaAFGcnuPQz7y/ggIQsbuimzD3CRGJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDAyMy82MTNFM0U5RTAx MTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwtQ0FoQ3h1NktiTVBjSkVZ bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5ZTQ5RFB2TC1DQWhDeHU2S2JNUGNKRVltOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDAyMy82MTNFM0U5RTAxMTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwt Q0FoQ3h1NktiTVBjSkVZbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI7b3cbIODTldQc9b9vTKaKFvOECAdLRePqDokLSPzO4SYYvttIpks o7f4ZIePsE4ApD3GDplx/fz9QU5lALD+2E+iScq71aCTt1nuOxOE+5x3L70tIB8M 8GQquhOHlUVU5d9tMaGJCyb7waJrbrWT+i3DQV3YajIxQBEuNUdbci+z8FLON8Ly 8VC8quIUwGZ0m3HrvGAXm1ofIefaC+r1J70qg+TFWqykU8CsO+xnCO3XeMtwDi7H n2XFBW2TDKXBC1MFo75z1w1uSZ15hJVpHoncKSEJmCsr6/kzKlPFFDTQsS2ZrKn5 U6t4DwhC6ego0qY8aoy0tvmFFp4+KMIG -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org